A public TrueCrypt Audit

Re:A public TrueCrypt Audit by thex86 on Wednesday October 09, 2013 @08:11PM (#6524826)

Just a simple question, leaving aside everything else: why in 2013 there is no public repository for TrueCrypt? How hard is it to have a public repository or at least a detailed change log of the changes they make between releases? How hard really?

[ Parent | on HN ]

Re:A public TrueCrypt Audit by nilved on Wednesday October 09, 2013 @09:02PM (#6525033)

It's not, that's why it's suspicious. Moreover, nobody has been able to replicate the binary blobs they post for download from source.

[ Parent | on HN ]

Re:A public TrueCrypt Audit by pgeorgi on Thursday October 10, 2013 @02:53AM (#6526082)

However there's an independent implementation using the system's crypto primitives, originally written for DragonFlyBSD:

See

http://leaf.dragonflybsd.org/cgi/web-man?command=tcplay&sect...

and

https://wiki.archlinux.org/index.php/Tcplay

That won't help much for Windows (esp. not with system encryption), but it might be able to help guard against weak key generation.

[ Parent | on HN ]